For my relationalness, I always create a role permission collection, p_roles, that links references to the account identifier as well as the role identifier.
This is where my last example came in. This time, however, I want to populate a grid of accounts that do not exist in a role, so that the interface user may add them to it. This required two things:
- an array of account ids we want to exclude
- a 'not in' query